Threats Tagged 'cve-2026-53357'

A use-after-free (UAF) vulnerability in the Linux kernel's Bluetooth subsystem was resolved. The flaw occurs due to a race condition between socket cleanup and connection deletion functions, leading to use of freed memory. This vulnerability affects the handling of listening sockets and concurrent HCI disconnect events. The issue was identified through KASAN and SMP testing, showing multiple use-after-free reports before the fix. The vulnerability is rated high severity due to its potential impact on confidentiality, integrity, and availability.

A use-after-free vulnerability in the Linux kernel's Bluetooth subsystem (CVE-2026-53357) has been resolved. The flaw involves improper handling of socket cleanup in the l2cap_sock_cleanup_listen() function concurrent with connection deletion, leading to use-after-free conditions. This vulnerability has a high severity with a CVSS score of 8.0 and affects multiple Linux kernel versions prior to 7.0.0-28.28 and related builds. Ubuntu has released patches addressing this and other kernel vulnerabilities, requiring system updates and reboots.